Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c7fV872rZD6th3xVaen9mG2oBpA.roa
File: c7fV872rZD6th3xVaen9mG2oBpA.roa (raw, json)
Hash identifier: 2UMq0/v59ttMK2KDnJHhNgxit9sLmaqAfQZIeYzPFwE=
Subject key identifier: 73:B7:D5:F3:BD:AB:64:3E:AD:87:7C:55:69:E9:FD:98:6D:A8:06:90
Certificate issuer: /CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Certificate serial: 019F23689667CACF95D5ADAE46A310ACA32C
Authority key identifier: D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c7fV872rZD6th3xVaen9mG2oBpA.roa
Signing time: Thu 02 Jul 2026 15:18:04 +0000
ROA not before: Thu 02 Jul 2026 15:18:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48623
IP address blocks: 81.4.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 19:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:96:67:ca:cf:95:d5:ad:ae:46:a3:10:ac:a3:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66e4794afc3a2ba25d252a857347ed4eeae6b40
Validity
Not Before: Jul 2 15:18:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73b7d5f3bdab643ead877c5569e9fd986da80690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f7:21:1b:f4:20:a2:1d:da:fe:25:64:4e:3b:
79:9a:bc:26:99:86:1d:c4:cc:68:a3:ff:d2:3e:f2:
7c:3f:25:dd:2c:cc:39:d9:17:b3:ad:a1:5d:1d:79:
0d:25:79:bf:1f:8e:81:3a:28:11:95:a5:58:21:16:
6e:dd:29:10:ce:e0:d1:ee:2e:49:cf:0a:e9:7a:27:
6b:41:7e:ab:be:79:23:66:93:12:ba:bb:d1:f3:5b:
10:22:5f:d2:c3:a8:fb:c2:3f:73:6a:b3:ff:38:34:
37:20:64:88:7c:19:72:2e:6e:34:d7:18:8c:79:9f:
25:32:43:ef:57:6f:b5:ce:7d:88:0a:f7:a7:7c:09:
7b:bb:ab:bb:9b:9c:46:9d:04:c9:aa:46:b9:ca:49:
57:8e:89:bf:00:dc:05:e1:eb:a5:be:ed:dd:e9:f5:
d9:b4:ab:ad:10:8e:9f:ae:d6:60:32:56:c8:d6:44:
60:31:09:4e:23:7c:dd:e8:49:a8:99:d6:eb:e9:c2:
2b:f7:74:58:bf:3c:2f:e3:fc:18:77:63:d4:bc:26:
64:1a:d5:c3:70:f7:09:c6:fb:d5:56:e7:6a:f3:5d:
09:7d:59:6c:69:a0:21:c8:31:e5:2e:22:a2:4d:28:
2b:cc:c6:69:81:e4:b3:3d:27:22:57:d9:09:b4:f8:
9c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:D5:F3:BD:AB:64:3E:AD:87:7C:55:69:E9:FD:98:6D:A8:06:90
X509v3 Authority Key Identifier:
keyid:D6:6E:47:94:AF:C3:A2:BA:25:D2:52:A8:57:34:7E:D4:EE:AE:6B:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m5HlK_Dorol0lKoVzR-1O6ua0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/c7fV872rZD6th3xVaen9mG2oBpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1m5HlK_Dorol0lKoVzR-1O6ua0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.4.154.0/24
Signature Algorithm: sha256WithRSAEncryption
76:26:84:62:c0:52:30:7e:34:0b:57:61:06:90:ff:de:ec:ff:
8e:4c:cc:4a:b5:a3:e1:89:89:c5:2d:e8:f1:7d:79:75:01:e4:
70:32:d5:ce:cc:e9:bf:ec:04:24:eb:86:b9:f3:3e:93:db:08:
3c:a7:f8:35:4b:c4:d9:7d:ab:a0:28:f2:74:c3:45:d2:b5:df:
3a:c5:57:dd:18:60:3b:5e:8c:d0:96:99:61:83:e7:07:3c:af:
a0:cf:cc:76:8b:1d:4e:23:1c:85:db:e2:a6:bd:61:02:3f:cb:
8b:e0:c9:98:fa:53:3e:f4:80:ad:67:e6:a0:84:ca:71:b0:95:
c3:18:8e:f2:1e:03:8a:f7:a6:38:84:a1:1c:98:06:bd:31:ee:
6c:f2:74:05:aa:d4:eb:21:83:64:d9:07:03:fc:eb:4a:22:aa:
12:29:02:9d:6b:dc:6d:89:38:f2:c3:16:54:c9:cb:56:39:5d:
a8:d0:93:11:c6:49:1b:b4:1f:7d:f7:2c:74:11:7a:36:cb:bf:
cd:17:bc:e9:f9:1b:a6:e4:5a:e2:fe:39:61:b3:5a:cf:bc:ff:
a5:6e:ff:7e:3c:89:13:c6:e3:6f:89:7f:a9:4b:22:57:25:e0:
d9:76:31:2f:45:50:02:45:9c:de:10:fd:3f:bb:ca:be:de:1e:
6f:43:e0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:58:42 2026 by rpki-client